This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft File: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft (raw, json) Hash identifier: 5fjZNNlL4zn6r1fF4401cbTfKcDGI//XrJsJ9YL53FE= Subject key identifier: 59:94:4B:D1:61:85:68:D3:FB:CC:84:EC:FB:1E:F8:FD:76:6B:D5:D6 Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B Certificate issuer: /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Certificate serial: 5DA8DD9B41A18D6C8BF3072A8A50277CF4C77800 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft Manifest number: 038C Signing time: Wed 17 Dec 2025 18:11:22 +0000 Manifest this update: Wed 17 Dec 2025 18:06:22 +0000 Manifest next update: Sun 21 Dec 2025 05:23:22 +0000 Files and hashes: 1: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl (hash: Z+tRLCsONxKvDEU6IedDkLA9Z/r4fEv9lk1ZT9GdRiY=) 2: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5h5J8xW62JxvWusBPqO7t7BtPqu0f0FKKCSn5YoWmpk=) 3: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: DS4rfXsOZAd6zyO+PWFbBzflwksjO/ECzvelckHR5dk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 05:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a8:dd:9b:41:a1:8d:6c:8b:f3:07:2a:8a:50:27:7c:f4:c7:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Validity Not Before: Dec 17 18:06:22 2025 GMT Not After : Dec 21 05:23:22 2025 GMT Subject: CN=59944BD1618568D3FBCC84ECFB1EF8FD766BD5D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:89:f5:a5:7a:56:eb:57:c0:9b:de:e2:60:3a: 01:5a:2a:e0:24:97:70:f1:a4:17:bf:4b:ad:2f:4d: c0:f6:89:cf:12:df:b2:b1:ad:6e:3f:f7:0c:b3:fc: 09:2f:96:a0:a9:33:c1:d5:23:27:49:21:3c:f3:1f: 9d:e3:b9:22:f2:80:41:38:2f:49:be:3f:fe:a6:de: a2:52:d8:3e:67:5f:71:90:33:9b:a8:c9:14:95:64: 92:cd:d6:52:96:dd:0f:08:5f:5c:f0:bc:31:87:23: aa:7f:36:c1:aa:d6:f9:c8:88:be:b1:4c:57:c2:85: b3:bd:fc:28:82:8d:6e:e8:6a:35:9d:47:47:76:58: a9:26:12:dd:65:96:e1:a7:66:b6:b7:45:e6:12:59: c7:43:d4:88:74:0f:4b:36:59:9c:72:94:f7:cf:9b: 4b:6b:60:8d:e2:3d:c8:76:f8:6e:6f:ce:70:57:2e: b4:9e:8a:08:37:76:b1:60:1e:ae:85:7a:5c:b0:27: a6:b5:b9:c8:e7:64:3d:de:c6:4c:38:bd:a4:d7:c1: 9d:39:b8:4d:db:b9:6d:e6:94:e5:48:60:e2:42:45: 44:4f:2d:fc:63:85:f3:f2:b9:89:1c:a6:67:49:6c: 3f:9c:5e:03:4e:bc:25:64:5a:a3:35:26:90:78:94: 72:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:94:4B:D1:61:85:68:D3:FB:CC:84:EC:FB:1E:F8:FD:76:6B:D5:D6 X509v3 Authority Key Identifier: keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:61:1c:24:81:94:1e:e4:ca:99:fe:54:24:3e:9f:86:c9:a3: 9f:b7:91:2e:af:4c:48:ba:44:ed:71:2d:11:44:82:db:dd:09: 2b:51:33:40:f5:0d:72:9b:66:b1:a3:98:29:61:98:7c:dd:f4: f2:12:40:66:ef:cb:d5:6b:b3:b8:3d:d9:5d:80:ef:3b:90:7e: 82:8e:a6:04:e9:d5:94:7d:f7:d6:0e:11:65:a7:10:cc:d6:5f: d9:81:57:dd:db:bd:d9:7e:4a:45:13:a8:8d:ff:90:25:f5:ea: 0b:b6:62:b0:1c:c4:7d:eb:0c:6a:91:9c:06:a9:67:c3:c7:a5: 24:40:2b:ba:8e:02:07:04:8a:07:cd:13:e7:90:c0:b9:c6:87: cb:2e:d2:d0:db:ca:90:57:3a:c9:7d:78:de:82:5b:3b:3b:3a: 0e:5b:07:f8:f4:04:d1:f1:29:53:d3:e6:20:d1:6f:89:2a:23: 5c:c2:20:3a:a9:6f:4b:e4:d3:30:9d:3b:fe:af:e5:0f:db:74: 2d:99:aa:a7:08:9d:f6:a6:6e:5f:02:56:a0:d6:1d:a8:c0:ec: 81:a3:93:aa:1a:3b:04:da:47:6c:37:d4:75:32:bf:20:e1:7c: 91:7a:7b:a4:34:a6:30:c8:e5:93:fd:fd:01:5e:a9:dd:b3:3b: 4d:c3:a5:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXajdm0GhjWyL8wcqilAnfPTHeAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZB MENCOUY4QjAeFw0yNTEyMTcxODA2MjJaFw0yNTEyMjEwNTIzMjJaMDMxMTAvBgNV BAMTKDU5OTQ0QkQxNjE4NTY4RDNGQkNDODRFQ0ZCMUVGOEZENzY2QkQ1RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyifWlelbrV8Cb3uJgOgFaKuAk l3DxpBe/S60vTcD2ic8S37KxrW4/9wyz/AkvlqCpM8HVIydJITzzH53juSLygEE4 L0m+P/6m3qJS2D5nX3GQM5uoyRSVZJLN1lKW3Q8IX1zwvDGHI6p/NsGq1vnIiL6x TFfChbO9/CiCjW7oajWdR0d2WKkmEt1lluGnZra3ReYSWcdD1Ih0D0s2WZxylPfP m0trYI3iPch2+G5vznBXLrSeigg3drFgHq6FelywJ6a1ucjnZD3exkw4vaTXwZ05 uE3buW3mlOVIYOJCRURPLfxjhfPyuYkcpmdJbD+cXgNOvCVkWqM1JpB4lHK3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWZRL0WGFaNP7zITs+x74/XZr1dYwHwYDVR0j BBgwFoAUPJFI7yevXtNIE0L13vJaJqDLn4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YThmNjlmNy05MzMyLTRjZDQtYjNlNS1jYzZjNDc3MmNmNzMvMC8zQzkxNDhFRjI3 QUY1RUQzNDgxMzQyRjVERUYyNUEyNkEwQ0I5RjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZBMENC OUY4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVB MjZBMENCOUY4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEthHCSBlB7kypn+VCQ+n4bJo5+3kS6vTEi6 RO1xLRFEgtvdCStRM0D1DXKbZrGjmClhmHzd9PISQGbvy9Vrs7g92V2A7zuQfoKO pgTp1ZR999YOEWWnEMzWX9mBV93bvdl+SkUTqI3/kCX16gu2YrAcxH3rDGqRnAap Z8PHpSRAK7qOAgcEigfNE+eQwLnGh8su0tDbypBXOsl9eN6CWzs7Og5bB/j0BNHx KVPT5iDRb4kqI1zCIDqpb0vk0zCdO/6v5Q/bdC2ZqqcInfambl8CVqDWHajA7IGj k6oaOwTaR2w31HUyvyDhfJF6e6Q0pjDI5ZP9/QFeqd2zO03DpXM= -----END CERTIFICATE-----Generated at Thu Dec 18 05:43:55 2025 by rpki-client